| 摘要 |
A security-procuring method for making an item of communications equipment (E) secure, said item of communications equipment comprising an operating system core (K) and a set of software applications (A), said core including at least one IPv6 protocol stack (PS) making it possible to transmit incoming data packets from an input port (P<SUB>IN</SUB>) to an application (A) and to transmit outgoing data packets from an application (A) to an output port (P<SUB>OUT</SUB>), said protocol stacks including a set of interfaces (H<SUB>PRE</SUB>, H<SUB>IN</SUB>, H<SUB>OUT</SUB>, H<SUB>POST</SUB>) organized to enable external modules connected to them to access said data packets transmitted by said at least one protocol stack at determined points associated with said interfaces. Said method is characterized in that an input module (M<SUB>IN</SUB>) and an output module (M<SUB>OUT</SUB>) are connected respectively to an input interface (H<SUB>IN</SUB>) and to an output interface (H<SUB>OUT</SUB>) of said core (K), and in that said modules select, analyze, and, if necessary, modify the data packets of the Network Discovery Protocol (NDP), in compliance with the Secure Neighbor Discovery (SEND) mechanism.
|
